fukuops/k8s/argo-apps/miniflux.yaml
cătălin 1fd2bfef3d
feat(helm): complete chart normalization with ConfigMap, HPA, and OCI migration
- Added debug mode, structured ConfigMap pattern, and README to all charts
- Migrated all flat-structure charts to hierarchical values under chartname key
- Fixed templates to use correct hierarchical paths
- Renamed helm-rustical key to rustical, added HPA support
- Fixed ingress YAML parsing (oxicloud), nested env vars (rustical)
- Pushed all normalized charts to OCI registry as 1.0.0+ and updated ArgoCD apps
2026-08-14 09:35:19 +02:00

92 lines
2.6 KiB
YAML

---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: miniflux
namespace: argo-cd
spec:
destination:
name: ''
namespace: apps-roboces
server: https://kubernetes.default.svc
sources:
- repoURL: git.roboces.dev/catalin/fukuops
chart: miniflux
targetRevision: 1.0.3
helm:
valuesObject:
miniflux:
autoscaling:
enabled: true
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
runAsUser: 10000
runAsGroup: 10000
capabilities:
drop:
- all
service:
type: LoadBalancer
ingress:
enabled: true
className: "traefik"
hosts:
- host: feeds.roboces.dev
paths:
- path: /
pathType: Prefix
resources:
requests:
cpu: 500m
memory: 512Mi
ephemeral-storage: 2Gi
limits:
cpu: 700m
memory: 1024Mi
ephemeral-storage: 4Gi
livenessProbe:
tcpSocket:
port: 8080
initialDelaySeconds: 5
timeoutSeconds: 15
successThreshold: 1
failureThreshold: 3
periodSeconds: 10
readinessProbe:
httpGet:
path: /
port: 8080
initialDelaySeconds: 15
timeoutSeconds: 2
successThreshold: 1
failureThreshold: 3
periodSeconds: 10
podDisruptionBudget:
enabled: true
maxUnavailable: 1
config:
general:
runMigrations: true
createAdmin: true
workerPoolSize: 1
pollingFrequency: 120
batchSize: 25
oauth2:
enabled: true
provider: oidc
redirectUrl: https://feeds.roboces.dev/oauth2/oidc/callback
oidcDiscoveryEndpoint: https://auth.fukurokuju.dev/application/o/miniflux/
userCreation: true
metrics:
enabled: true
allowedNetworks: 10.42.1.0/16
youtube:
fetchWatchTime: true
secret:
existingSecretName: miniflux
project: roboces
syncPolicy:
automated:
prune: true
selfHeal: true